room = mr->headroom; ... if (chunk_size < XDP_UMEM_MIN_CHUNK_SIZE || chunk_size > PAGE_SIZE) { /* Strictly speaking we could support this, if: * - huge pages, or* * - using an IOMMU, or * - making sure the memory area is consecutive * but for now, we simply say "computer says no". */ return -EINVAL; } ... } The problem is exactly the overflow.[lvc-project] [PATCH net] xsk: Fix overflow in descriptor validation@@Ilia Gavrilov undefinedMagnus Karlsson , Alexander Lobakin undefined undefined undefined undefined undefined undefined undefined undefined undefined undefined undefined undefined undefined undefined undefined undefined undefined undefined undefined undefinedŠƒ…R